
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF8D6/4D42F56CF1A311EAB5FD9824C4F9AE02/S5eEFeFn2yY-8mSaHDuLstQ_Ybc.mft
File: S5eEFeFn2yY-8mSaHDuLstQ_Ybc.mft (raw, json)
Hash identifier: 1BaIpFzCBAXhbUSKo7ynv8c3zDa9OXIQ1x6X/6i4xCo=
Subject key identifier: 95:51:E0:38:E2:48:FC:37:9C:BD:E4:91:5F:19:CE:08:50:56:CD:D6
Authority key identifier: 4B:97:84:15:E1:67:DB:26:3E:F2:64:9A:1C:3B:8B:B2:D4:3F:61:B7
Certificate issuer: /CN=A91EF8D6/serialNumber=4B978415E167DB263EF2649A1C3B8BB2D43F61B7
Certificate serial: 0873
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S5eEFeFn2yY-8mSaHDuLstQ_Ybc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EF8D6/4D42F56CF1A311EAB5FD9824C4F9AE02/S5eEFeFn2yY-8mSaHDuLstQ_Ybc.mft
Manifest number: 0866
Signing time: Mon 02 Mar 2026 00:44:22 +0000
Manifest this update: Mon 02 Mar 2026 00:44:19 +0000
Manifest next update: Mon 09 Mar 2026 00:44:19 +0000
Files and hashes: 1: S5eEFeFn2yY-8mSaHDuLstQ_Ybc.crl (hash: 9JXD1jPiu0iF8zF2ZMq85j9tfN6p+ogF3heznooi200=)
2: 3DA25C7A036811F0A14CC938C4F9AE02.roa (hash: y7Iz2rPJdAOlGQ4MtuTgFktbk+yS4xEJ9nZlCdDX5sY=)
3: 6E603522F1AB11EA9F82A23DC4F9AE02.roa (hash: 8lKBmwh4w3njS1t99CtRQ9cpWrcLS15+u5yFjKAOlNQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EF8D6/4D42F56CF1A311EAB5FD9824C4F9AE02/S5eEFeFn2yY-8mSaHDuLstQ_Ybc.crl
rsync://rpki.apnic.net/member_repository/A91EF8D6/4D42F56CF1A311EAB5FD9824C4F9AE02/S5eEFeFn2yY-8mSaHDuLstQ_Ybc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S5eEFeFn2yY-8mSaHDuLstQ_Ybc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:44:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2163 (0x873)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EF8D6, serialNumber=4B978415E167DB263EF2649A1C3B8BB2D43F61B7
Validity
Not Before: Mar 2 00:44:19 2026 GMT
Not After : Mar 9 00:44:19 2026 GMT
Subject: CN=69a4dd66-8566
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c7:a8:7e:f3:f6:47:7b:f9:f6:8a:2c:42:d9:
85:bd:9c:53:00:06:9e:f2:5c:90:3b:f5:4e:f2:86:
6a:e7:ba:be:a1:d4:d8:82:3e:0e:c3:29:ec:6b:78:
0e:cf:e5:dc:68:de:29:a6:f6:bb:f3:63:31:74:75:
da:43:1d:85:89:3d:b8:3f:d0:53:b0:e1:7e:71:a1:
1f:63:0e:33:28:cf:04:9e:5f:0e:27:fd:be:7a:9d:
54:1e:9e:61:58:04:42:ee:69:fc:00:04:a0:6f:ae:
b4:d6:96:35:2d:1b:7d:84:b0:bc:60:5b:75:ed:39:
4f:3c:a4:a2:a7:5d:ce:61:f4:d9:0e:b6:dc:7c:43:
39:73:bf:56:50:de:cb:be:28:73:45:b1:1c:04:a3:
82:7c:46:49:f8:e9:55:aa:89:49:d5:37:91:8b:de:
aa:76:3c:82:3e:dc:b4:dd:84:2f:0f:80:41:70:c7:
bb:0c:aa:a4:61:8d:3e:1a:6f:fa:38:42:fa:ea:33:
e5:01:d9:36:3b:2f:f8:56:be:af:ed:bd:4f:15:a9:
31:99:a8:42:77:33:c1:65:bd:ea:4a:68:a4:0d:d5:
d9:a3:7f:d8:27:6c:36:06:9f:cc:7b:01:2e:ed:76:
a0:35:3f:75:7e:75:d2:ce:48:6f:2e:2a:e0:34:12:
56:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:51:E0:38:E2:48:FC:37:9C:BD:E4:91:5F:19:CE:08:50:56:CD:D6
X509v3 Authority Key Identifier:
keyid:4B:97:84:15:E1:67:DB:26:3E:F2:64:9A:1C:3B:8B:B2:D4:3F:61:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EF8D6/4D42F56CF1A311EAB5FD9824C4F9AE02/S5eEFeFn2yY-8mSaHDuLstQ_Ybc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S5eEFeFn2yY-8mSaHDuLstQ_Ybc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF8D6/4D42F56CF1A311EAB5FD9824C4F9AE02/S5eEFeFn2yY-8mSaHDuLstQ_Ybc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:25:aa:93:b9:01:e9:0f:33:b0:d1:9f:40:79:1b:fa:1b:01:
ec:f1:71:0b:53:2b:df:0b:db:a3:c3:65:5d:9b:d8:38:32:3e:
34:1a:c7:25:91:28:43:0c:fb:fd:b6:a0:15:a5:06:bb:ef:8b:
6e:12:2a:f8:8b:3e:27:1f:e6:81:20:14:cb:b7:1e:b7:39:32:
23:0d:a1:50:b4:1f:77:d4:f9:97:3b:aa:a8:9a:07:73:2c:35:
89:09:58:75:41:a5:f1:45:79:8f:03:5d:e4:19:f1:23:2a:cf:
90:39:60:98:70:19:b7:92:20:e2:09:fd:89:91:38:6f:05:a5:
2d:ef:cd:58:c3:41:13:b4:e1:cb:39:77:1a:56:79:ad:f3:61:
49:a2:d5:0c:fb:9e:1a:f9:94:53:24:43:d9:76:44:98:cf:06:
dd:64:03:9d:32:d5:d3:dd:65:e3:21:2c:fc:37:95:f4:9b:a3:
00:cd:9b:bb:55:47:8a:59:1a:85:d9:fb:9c:6a:cf:e2:02:46:
f3:e4:4f:14:35:e5:38:20:2b:ca:3f:43:7b:84:73:34:63:b2:
63:b1:f3:a7:a2:c7:26:81:2e:ff:f8:80:d1:04:aa:e6:23:e1:
67:e5:b0:1c:03:1b:18:34:0e:af:1a:8a:6a:8d:27:79:74:8d:
84:a2:04:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:45:09 2026 by rpki-client